
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json)
Hash identifier: M32+mkSWbR7VJb9j0WxNbCADtWPyw3hUS/o/kNr89bc=
Subject key identifier: FC:9A:E1:1F:C6:97:1C:23:C1:69:86:6E:55:5C:FF:3E:EC:81:AC:38
Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D
Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
Certificate serial: 0215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
Manifest number: 0208
Signing time: Thu 11 Jun 2026 05:15:30 +0000
Manifest this update: Thu 11 Jun 2026 05:15:30 +0000
Manifest next update: Thu 18 Jun 2026 05:15:30 +0000
Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: a4y7D3fw787siDRU6yuueRhyucgG0Tx3V2zmQKBwdYs=)
2: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XzdXJalmDiwrsQ8br8C3/6RWRgcAD1TML6UnE7S8eYc=)
3: B3677C08D2AA11F0850BC856C4F9AE02.roa (hash: 0XvamhyH8INrFu62hoTA3sr2g5V8xYOOdXcsdLQK1l8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl
rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 05:15:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
Validity
Not Before: Jun 11 05:15:30 2026 GMT
Not After : Jun 18 05:15:30 2026 GMT
Subject: CN=6a2a4472-fc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:2f:85:60:73:2e:79:2a:99:5e:88:c4:1b:
02:21:79:9d:21:11:ad:1a:6e:e9:9f:cc:82:c7:68:
7a:14:94:d2:d4:16:f1:e6:ce:75:24:4b:45:48:e1:
b7:20:83:b0:d5:65:36:9d:f6:5c:fc:2a:71:eb:f6:
43:dc:21:f7:75:0f:6c:b4:e0:d0:85:53:47:b7:f2:
90:4d:9f:41:99:4f:ce:bf:fa:87:48:28:2f:20:61:
74:d5:81:24:78:72:28:e3:9e:ab:91:f3:99:9b:48:
a7:46:d8:ca:cc:c1:ed:18:a7:66:8b:95:76:8b:79:
84:1e:7c:95:26:3e:48:20:96:99:3d:e2:92:ba:eb:
bd:ee:a9:50:f2:ef:72:86:7c:67:41:5b:0f:67:23:
0a:52:74:72:71:64:f0:43:33:ce:0f:77:3c:00:08:
e3:d1:21:7f:ff:f4:f9:6f:13:76:96:70:96:a7:25:
56:d9:f5:c7:2a:be:8f:72:a6:5d:dc:6d:d8:d6:65:
87:00:39:cb:e7:a7:ed:fd:76:7e:62:0c:f6:59:09:
5b:01:8e:4f:e7:c0:9c:e9:37:6d:5a:05:e8:86:97:
85:58:5b:64:58:cd:25:ab:d3:87:26:d4:c3:3d:f2:
c9:1f:dc:d8:11:01:db:43:5b:38:be:41:ce:d1:08:
06:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9A:E1:1F:C6:97:1C:23:C1:69:86:6E:55:5C:FF:3E:EC:81:AC:38
X509v3 Authority Key Identifier:
keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:58:bb:23:56:c3:08:67:f6:94:1d:68:f1:31:aa:f5:52:76:
05:b1:12:c7:4f:09:2b:07:b6:0b:e3:7c:59:29:57:50:44:f0:
70:08:ff:1c:2b:c1:ed:c7:99:6b:7c:1e:8a:25:10:9d:40:b8:
0c:66:2c:4a:85:a4:09:aa:ec:26:63:cf:fa:a7:9f:4f:38:e6:
70:58:e0:e3:13:f2:b9:94:f4:e0:7c:25:11:5b:53:bc:73:f0:
64:df:94:fd:dd:82:dc:30:f1:4d:31:39:98:b0:4b:7d:1d:d2:
1d:6c:9b:1c:c7:bd:e9:eb:e7:3a:aa:b5:59:39:6f:01:7d:95:
3c:95:c9:22:cb:cf:66:53:77:11:15:c7:f8:e3:e8:bd:d1:c1:
bf:27:33:02:62:6e:d4:3c:0c:c1:ac:d5:d1:fc:ff:05:49:78:
e0:f2:ca:d8:8b:5a:1c:d4:cb:9b:c3:7b:96:59:fe:7e:8d:c0:
6a:aa:e7:6c:1e:0e:7f:e3:c2:33:77:ea:c8:2d:b0:b4:81:9f:
14:4e:14:6a:23:05:0a:6c:37:32:eb:c8:08:d8:58:4a:97:ab:
6b:91:bc:44:01:4e:1e:4e:40:5b:80:ce:28:e4:bc:61:f1:31:
4b:1b:71:11:80:f7:9a:57:2d:0a:cb:56:46:8a:97:d0:52:dc:
9c:8f:8b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 18:15:05 2026 by rpki-client